4 matches found
PT-2024-27719 · Unknown · Datalife Engine
Name of the Vulnerable Software and Affected Versions: DataLife Engine versions prior to 17.1 Description: The issue is related to SQL Injection in the dboption component. Recommendations: For versions prior to 17.1, consider restricting access to the dboption component to minimize the risk of...
CVE-2024-37699
The DataLife Engine Content Management System (CMS) is vulnerable to SQL Injection in the dboption component in versions v.17.1 and before . This vulnerability allows an attacker to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. While specific exp...
DataLife Engine SQL Injection Vulnerability
DataLife Engine DLE is a CMS from DataLife Engine, Inc. that allows users to create and manage their own websites without programming. A SQL injection vulnerability exists in DataLife Engine v.17.1 and earlier versions, which stems from dboption being vulnerable to SQL injection attacks...